Skip to content
Kerbwell
Sign in

Help / Comms and deliverability

Authenticate your sending domain

Mail from the platform leaves under your domain, not ours. Your client sees your address, replies reach you, and your domain builds its own sending reputation instead of borrowing one.

What this does

Publishes three records at your DNS so receiving mail servers can tell that mail claiming to come from your domain really did.

How to do it

  1. In the tenant admin, open Sending and enter the domain you send from. This is usually the same domain as your business email.
  2. The screen shows three records. Add all three at your DNS provider.
  3. Press Verify. The platform queries your DNS directly and shows what it found, record by record, rather than a single pass or fail.
  4. Send the test message the screen offers, to an address outside your own organisation.

What proves it worked

Open the test message in the external inbox and view its original headers. You are looking for three passes: SPF, DKIM and DMARC. All three, in the received headers of a message that actually arrived. A green tick on our screen means the records exist; it does not mean a message landed, and those are different facts.

Send the test to a personal address on a different provider than your business mail. A message from your own domain to your own domain can pass for reasons that will not hold for anyone else.

When it does not work

The most common failure is a second SPF record. A domain may publish only one, and providers that add their own on setup leave you with two. Merge them into a single record rather than deleting the one you did not add.

The second most common failure is a message that passes every check and still lands in junk. Authentication proves the sender; it does not prove reputation. If the domain is new, send a low volume for the first fortnight rather than a campaign on day one.

What we do not do

We never send from a personal mailbox on your behalf, and we never send a notification to an address that has not been checked as a real monitored mailbox. A notification that goes to an address nobody watches is worse than no notification, because it looks like it worked.